$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144587.roa File: AS144587.roa (raw, json) Hash identifier: R4whiAT59StLfHeY6nurc3T9yuxCsRPZ2x2FTtBo+us= Subject key identifier: 6C:71:9D:3B:CA:7D:F8:87:C8:9F:67:1E:F0:7E:29:08:0E:9C:E5:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AF0737FC70B56BF562A83864C3FB22373AC2C17 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144587.roa Signing time: Wed 04 Mar 2026 06:19:17 +0000 ROA not before: Wed 04 Mar 2026 06:14:17 +0000 ROA not after: Wed 03 Mar 2027 06:19:17 +0000 asID: 144587 IP address blocks: 240a:a791::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f0:73:7f:c7:0b:56:bf:56:2a:83:86:4c:3f:b2:23:73:ac:2c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:17 2026 GMT Not After : Mar 3 06:19:17 2027 GMT Subject: CN=6C719D3BCA7DF887C89F671EF07E29080E9CE546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:9e:4e:d6:b7:80:6b:81:ce:ac:dd:1a:7a: 93:af:a4:21:b2:2c:0f:bc:7f:96:f9:dc:90:39:b0: 46:a8:04:37:c6:15:58:8b:ed:42:bd:9b:d1:76:96: f4:3c:d5:d9:27:e4:74:a4:33:ad:28:1c:9a:33:fc: 69:12:c4:30:70:1c:9b:22:08:b1:2b:ae:b4:dd:1e: 6e:b9:67:62:b3:fe:44:55:cf:43:dd:ff:50:bf:ae: 4f:9e:f2:34:44:a2:21:f8:fd:c2:08:97:10:a3:09: f0:38:f2:a7:21:7f:22:d6:f3:ed:b5:a1:61:ac:a7: 74:b1:d1:4a:e5:ea:cc:58:70:56:7e:1a:b9:c8:bd: 84:74:fb:1d:69:be:82:8c:64:65:70:67:38:a1:28: 38:a5:4c:cc:55:ba:78:ed:0b:97:88:7a:67:bc:9d: 2e:98:aa:fc:27:45:51:24:40:fe:a6:04:19:9c:4d: 67:89:15:3f:9e:ca:b5:17:f8:ec:c3:18:4d:1f:cb: 19:98:54:4b:87:ff:10:f5:1a:95:fd:8c:8b:f6:f1: 7f:94:28:94:6d:f4:08:d0:bf:61:46:74:70:5c:9d: 6d:fa:57:fc:23:3c:a4:54:15:42:20:15:5b:09:02: 42:f1:25:45:61:ea:b0:26:da:ad:18:b4:c9:1e:cd: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:71:9D:3B:CA:7D:F8:87:C8:9F:67:1E:F0:7E:29:08:0E:9C:E5:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144587.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a791::/32 Signature Algorithm: sha256WithRSAEncryption 9a:3b:c0:a7:1b:6a:d3:05:b4:8d:d5:da:78:e0:97:23:3c:d4: 41:3a:32:b9:fa:43:12:8d:2a:db:1a:9a:a3:6e:2f:9e:92:b7: d3:3a:e6:18:ac:fe:b4:69:1b:b7:12:a5:f7:e2:98:0d:75:2e: 8d:6d:ff:c7:0d:47:b4:2f:ee:b7:29:4b:9f:72:ff:47:05:fa: 85:bb:c6:f6:61:3c:51:ff:7e:1c:cc:5a:23:d4:7e:f7:9a:d2: 6f:ad:d1:a9:23:e7:bc:16:18:bc:aa:a4:3c:6a:e9:f8:f2:a8: 09:cf:34:41:e6:0e:50:1a:a8:5d:14:03:c1:2f:d2:28:b9:0e: 28:66:e4:26:66:36:3a:74:4b:92:5b:88:04:05:a1:76:9d:52: d4:e7:5a:e7:c0:5f:4a:92:96:0f:dc:1b:e0:44:71:2a:0d:1a: 54:65:e6:6a:41:15:b9:87:e8:1c:9d:b4:a8:07:8c:13:87:64: 50:28:a6:20:1c:e8:c3:11:95:09:ed:ed:f9:58:c9:e8:37:96: 42:33:bd:12:5a:81:ea:23:35:5b:19:0e:3d:be:2d:2c:bd:80: 75:d0:17:42:ba:c8:8b:0e:5b:04:75:7a:78:9d:a5:3f:4c:d6: 91:4d:b0:29:61:8a:97:16:77:75:d7:50:78:0a:64:7e:21:45: 2c:7f:ce:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGvBzf8cLVr9WKoOGTD+yI3OsLBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQxN1oX DTI3MDMwMzA2MTkxN1owMzExMC8GA1UEAxMoNkM3MTlEM0JDQTdERjg4N0M4OUY2 NzFFRjA3RTI5MDgwRTlDRTU0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTAnk7Wt4Brgc6s3Rp6k6+kIbIsD7x/lvnckDmwRqgEN8YVWIvtQr2b0XaW 9DzV2SfkdKQzrSgcmjP8aRLEMHAcmyIIsSuutN0ebrlnYrP+RFXPQ93/UL+uT57y NESiIfj9wgiXEKMJ8DjypyF/Itbz7bWhYayndLHRSuXqzFhwVn4auci9hHT7HWm+ goxkZXBnOKEoOKVMzFW6eO0Ll4h6Z7ydLpiq/CdFUSRA/qYEGZxNZ4kVP57KtRf4 7MMYTR/LGZhUS4f/EPUalf2Mi/bxf5QolG30CNC/YUZ0cFydbfpX/CM8pFQVQiAV WwkCQvElRWHqsCbarRi0yR7NGQ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRscZ07 yn34h8ifZx7wfikIDpzlRjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p5EwDQYJKoZIhvcNAQELBQADggEBAJo7wKcbatMFtI3V2njglyM81EE6Mrn6QxKN KtsamqNuL56St9M65his/rRpG7cSpffimA11Lo1t/8cNR7Qv7rcpS59y/0cF+oW7 xvZhPFH/fhzMWiPUfvea0m+t0akj57wWGLyqpDxq6fjyqAnPNEHmDlAaqF0UA8Ev 0ii5Dihm5CZmNjp0S5JbiAQFoXadUtTnWufAX0qSlg/cG+BEcSoNGlRl5mpBFbmH 6BydtKgHjBOHZFAopiAc6MMRlQnt7flYyeg3lkIzvRJageojNVsZDj2+LSy9gHXQ F0K6yIsOWwR1enidpT9M1pFNsClhipcWd3XXUHgKZH4hRSx/zoI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:04 2026 by rpki-client